CVE-2018-16555

A vulnerability has been identified in SCALANCE S602 (All versions < V4.0.1.1), SCALANCE S612 (All versions < V4.0.1.1), SCALANCE S623 (All versions < V4.0.1.1), SCALANCE S627-2M (All versions < V4.0.1.1). The integrated web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known.

• CWE-80
• CWE-79

• http://www.securityfocus.com/bid/105937Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-242982.pdfVendor Advisory
• http://www.securityfocus.com/bid/105937Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-242982.pdfVendor Advisory

Published

Dec 13, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1655IBM AIX 5.3, 6.1, 7.1, and 7.2 contains a vulnerability in t…4
• CVE-2018-16550TeamViewer 10.x through 13.x allows remote attackers to bypa…
• CVE-2018-16551LavaLite 5.5 has XSS via a /edit URI, as demonstrated by cli…
• CVE-2018-16552MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, …8.8
• CVE-2018-16553In Jspxcms 9.0.0, a vulnerable URL routing implementation al…
• CVE-2018-16554The ProcessGpsInfo function of the gpsinfo.c file of jhead 3…
• CVE-2018-16556A vulnerability has been identified in SIMATIC S7-400 CPU 4…7.5
• CVE-2018-16557A vulnerability has been identified in SIMATIC S7-400 CPU 4…8.2
• CVE-2018-16558A vulnerability has been identified in SIMATIC S7-1500 CPU (…
• CVE-2018-16559A vulnerability has been identified in SIMATIC S7-1500 CPU (…
• CVE-2018-1656The IBM Java Runtime Environment's Diagnostic Tooling Framew…7.4
• CVE-2018-16560Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…